ClawHub

Alicloud Data Lake Dlf

v1.0.3

Manage Alibaba Cloud Data Lake Formation (DataLake) via OpenAPI/SDK. Use whenever the user asks for DataLake catalog resource operations, configuration updat...

⭐ 0· 1.1k·2 current·2 all-time
by@cinience
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name and description match the included assets: SKILL.md documents using Alibaba Cloud OpenAPI/SDK for DataLake and the repo includes a script that fetches DataLake OpenAPI metadata from api.aliyun.com. Nothing in the files requires unrelated services or capabilities.
ℹ
Instruction Scope
SKILL.md instructs the agent to use environment credentials (ALICLOUD_ACCESS_KEY_ID / SECRET / REGION) or shared config (~/.alibabacloud/credentials) and to run the provided script which fetches metadata from api.aliyun.com and writes outputs to output/alicloud-data-lake-dlf/. The instructions do not request reading unrelated system paths or exfiltrating data, but they do expect access to cloud credentials (reasonable for the purpose).
✓
Install Mechanism
No install spec is present (instruction-only plus a small Python script). No network install or archive downloads are performed by the skill itself; the included script makes an outbound HTTPS request to a documented Alibaba API endpoint (api.aliyun.com).
ℹ
Credentials
The skill's instructions legitimately require Alibaba Cloud credentials to operate. Registry metadata, however, lists no required env vars/primary credential — a minor inconsistency: the skill expects ALICLOUD_ACCESS_KEY_ID and ALICLOUD_ACCESS_KEY_SECRET (and optional ALICLOUD_REGION_ID) at runtime but does not declare them as required in the registry metadata. This is likely an authoring omission rather than malicious.
✓
Persistence & Privilege
always is false and the skill is user-invocable; it does not request persistent installation or elevated platform privileges. It writes artifacts only under the skill output directory per SKILL.md.
Assessment
This skill appears to do what it says: it fetches DataLake OpenAPI metadata from api.aliyun.com and guides the agent to call Alibaba Cloud APIs. Before installing or running it, ensure you: (1) supply least-privilege Alibaba Cloud credentials (ALICLOUD_ACCESS_KEY_ID / ALICLOUD_ACCESS_KEY_SECRET and optionally ALICLOUD_REGION_ID) or keep a properly permissioned ~/.alibabacloud/credentials file; (2) run the included script in a safe environment since it will make HTTPS requests to api.aliyun.com and write files under output/alicloud-data-lake-dlf/; (3) confirm the agent asks for the region and user confirmation before performing any mutating operations. Note the registry metadata does not declare the env vars the SKILL.md expects — the platform may not automatically surface credential prompts, so you should provide credentials manually and review them for least privilege. If you want extra assurance, review the small Python script (it only calls api.aliyun.com) and run it in a non-production environment first.

Like a lobster shell, security has layers — review code before you run it.

latestvk976wyr0v86yjm7e5ckj3ezrt182pm1q

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments